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Start: User moves to foreign domain; \ 
optionally user discovers CoA of FA J 



Wireless Access Point (WAP) redirects 
(UID, Pwd) and (CoA, HoA) to a home 
domain's AAA server 
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User provides Identification information 
(UID, Pwd) for authorization to access host 
network, and WiFi and provides HoA for 
mobile registration 
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Do not grant access to wireless 


network; optionally allow wireless user 


to retry to obtain access 
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End 
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Notify WAP to grants access to 
wireless user 
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HA sends traffic for user to FA 
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FA sends traffic to user 
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e Start: User moves to foreign domain; \ 
optionally user discovers CoA of FA J 
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User provides Identification information 
(VPN-ID, UID, Pwd) for authorization to 
access VPN host network and WiFi, and 
provides HoA for mobile registration 
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Do not grant access to wireless 
network; optionally allow wireless user 
to retry to obtain access 



CoA, HoA pair updated on HA; CoA 
established as end point for VPN with 
wireless user 
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VPN host network grants access and 
sends its private IP address to WiFi 






WAP grants access to wireless user 
and assigns VPN host network's 
private IP address to user 
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End 



Encrypted session established 
between user and WAP 
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Traffic between wireless user and 
host network flows through VPN 
tunnel 



